Category Archives: IdentityServer

Troubleshooting IdentityServer

Posted on July 18, 2013 by Dominick Baier

I often get questions similar to: “We are trying to do X – but we only see ‘Sorry, an error occurred while processing your request.’ in the browser. What am I missing” Well – that means an error has occurred..and … Continue reading →

Posted in IdentityServer | Leave a comment

IdentityServer: Preview of the OpenID Connect Basic Client Profile

Posted on July 16, 2013 by Dominick Baier

The mid term plan is that OpenID Connect will replace the plain OAuth2 endpoints in IdentityServer. As a first step, I just checked in a preview of the OIDC basic client profile support (see this doc). The preview consists of … Continue reading →

Posted in ASP.NET, IdentityServer, WebAPI | 4 Comments

IdentityServer: Using WS-Federation with JWT Tokens (and symmetric Signatures)

Posted on July 16, 2013 by Dominick Baier

In this post I described how to use IdentityServer to do WS-Federation with JWT tokens. In that post I used the default IdSrv signing certificate to sign the outgoing JWT tokens. There are scenarios where you don’t have certificates but … Continue reading →

Posted in ASP.NET, IdentityServer, WebAPI | 7 Comments

Using IdentityServer to issue tokens for Windows Server ServiceBus

Posted on July 12, 2013 by Dominick Baier

Windows Server ServiceBus supports SWT tokens to authorize actions on a SB namespace or entity (e.g. listen, send or manage). In the Azure version of ServiceBus you would use the Azure Access Control Service to issue such tokens. In the … Continue reading →

Posted in Azure, IdentityModel, IdentityServer | 8 Comments

Bringing SWT Support back to Thinktecture IdentityModel

Posted on July 9, 2013 by Dominick Baier

When Microsoft released the JWT library, I thought that’s a good opportunity to remove the SWT support from IdentityModel. But it turns out, there are still scenarios for SWT – so I refreshed my old code and added the SWT … Continue reading →

Posted in IdentityModel, IdentityServer | 1 Comment

Thinktecture AuthorizationServer v0.5 released

Posted on July 7, 2013 by Dominick Baier

I just uploaded a “feature complete” version of AuthorizationServer to Github. This version has all the features we are planning for v1 – please give us feedback when you  think things should work differently or when you find a bug. … Continue reading →

Posted in AuthorizationServer, IdentityModel, IdentityServer, OAuth, WebAPI | Leave a comment

IdentityServer: Using WS-Federation with JWT Tokens

Posted on July 4, 2013 by Dominick Baier

WS-Federation is token agnostic – that means you can also use JWT tokens instead of the default SAML ones. Why would you want to do that? Well – JWT’s a slightly more compact which I think is irrelevant for WS-Federation … Continue reading →

Posted in ASP.NET, IdentityModel, IdentityServer | 8 Comments

New IdentityServer Feature: Accept encrypted SAML tokens via WS-Federation/HRD

Posted on June 30, 2013 by Dominick Baier

This was long pending and some people asked for it. You can now configure a decryption certificate in the admin area and use that to decrypt incoming SAML tokens via WS-Federation: So far I have only tested with my ADFS … Continue reading →

Posted in IdentityServer | Leave a comment

NDC Oslo 2013 Slides and Videos

Posted on June 27, 2013 by Dominick Baier

The NDC videos are online now! Web API Security (includes first public demo ever of AuthorizationServer)Video: https://vimeo.com/68327244Slides: https://speakerdeck.com/leastprivilege/securing-asp-dot-net-web-api-ndc-oslo-2013 OAuth2 – The good, the bad and the uglyVideo: https://vimeo.com/68331687Slides: https://speakerdeck.com/leastprivilege/oauth2-the-good-the-bad-and-the-ugly-ndc-oslo-2013 Enjoy!

Posted in .NET Security, AuthorizationServer, IdentityModel, IdentityServer, OAuth, WebAPI | Leave a comment

Adding Windows Azure AD (GA) as an Identity Provider in IdentityServer

Posted on June 24, 2013 by Dominick Baier

Things have slightly changed between releases of WAAD, so I thought I quickly document the steps how to add the GA version of WAAD as an identity provider to IdentityServer. If we would support parsing WS-Federation metadata, this could be … Continue reading →

Posted in IdentityServer | 7 Comments